---
title: SAIF.Application.Claim dependencies
summary: Internal and external dependencies for the claim-context application manager library.
status: draft
owner: SAIF Claims BOF team
last_reviewed: 2026-08-21
library: SAIF.Application.Claim
reference_type: embedded
---

# SAIF.Application.Claim dependencies

## Internal dependencies

| Dependency | Reference Type | Usage |
| --- | --- | --- |
| [SAIF.Application](../saif-application/overview.md) | Project Reference | Supplies `AppManagerBase`, `UserAccess`, `AppConstants`, `DataLayer`, `EnvironmentService`, `AppSecurityRole`, and the overridable application lifecycle (`OnRetrieve`, `OnWrite`, `MarkContextSet`/`MarkContextNotSet`, `MarkViewOnly`/`MarkNoAccess`, `SecurityPrincipal`, `SecurityRole`, `Message`) that `ClaimAppManager` and `ClaimUserAccess`/`ClaimAppConstants` inherit from. |
| SAIF.BOF.Business (`SAIF.Business.dll`) | NuGet Package | Supplies `clsSecurityPrincipal`, `clsClaimData`, and related business types consumed by `ClaimAppManager`/`ClaimSecurity`. |
| SAIF.BOF.Business.Tasks / SAIF.BOF.Business.Tasks.Claim | NuGet Package | Supplies `clsClaimTaskGenerator`, used by `ClaimAppManager.Tasks`/`SaveTasks()`. |
| SAIF.BOF.Framework (Bindable, Connection, Core, DNS, Logging, Mail, Security, Security.EnvironmentApi) | NuGet Package | Framework-level BOF plumbing (data portal, security principal, environment/config service) underlying `AppManagerBase`/`EnvironmentService`. |
| SAIF.BOF.Business.View.Claim / SAIF.BOF.Business.View.Provider | NuGet Package | Imported (`Import Include="SAIF.Business.View.Claim"`) but no directly-referenced type from these assemblies was observed in this library's source files*. |
| SAIF.Framework.Common | NuGet Package | Referenced assembly; no direct type usage observed in this library's own code*. |
| SAIF.HashUtil | NuGet Package | Referenced assembly; no direct type usage observed in this library's own code*. |
| SAIF.ResourceFiles (`SAIF.BOF.ResourceFiles`) | NuGet Package | Referenced assembly; no direct type usage observed in this library's own code*. |
| SAIF.Legacy.BankValidator (`BankValidator.dll`) | NuGet Package | Referenced assembly; no direct usage observed in this library's own code*. |
| ImagingAPI.Client / ImagingAPI.Core | NuGet Package | Supplies `ImagingClient`, used by `ClaimAppManager.ClaimImageApiClient` (constructed with the `imagingapiurl` configuration setting). |
| PdfAPI.Client / PdfAPI.Core | NuGet Package | Referenced assembly; no direct usage observed in this library's own code*. |
| SAIF.Web.API.Clients / SAIF.Web.API.Core | NuGet Package | Referenced assembly; no direct usage observed in this library's own code*. |

## External dependencies

| Dependency | Version | Usage |
| --- | --- | --- |
| Autofac | 3.5.2 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| FluentValidation | 5.5.0.0 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| BouncyCastle | 1.8.9 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| log4net | 2.0.5 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| Newtonsoft.Json | 8.0.3 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| RestSharp | 106.12.0 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| iTextSharp | 5.5.11 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| Oracle.ManagedDataAccess | 21.5.0 | Oracle ODP.NET managed driver; configured via `Web.config`/`app.config` `DbProviderFactories` registration, used transitively through the BOF data layer rather than directly in this library's code. |
| Microsoft.AspNet.WebApi.Client / .Core / .WebHost | 5.2.7 | Third-party library referenced at the project level; no direct usage observed in this library's own code*. |
| Microsoft.Bcl.AsyncInterfaces | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Buffers | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Memory | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Numerics.Vectors | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Runtime.CompilerServices.Unsafe | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Text.Encodings.Web | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Text.Json | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.Threading.Tasks.Extensions | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |
| System.ValueTuple | (unspecified in packages.config)** | Transitive/BCL-polyfill package pulled in by other references; no direct usage in this library's own code*. |

## Dependency risks and notes
- `frameworkDensity` for this library is 0 — no direct inheritance from a documented framework base class was detected, so no transitive framework dependency section applies to this library*.
- The security-override bypass for [BR-CLM-001](business-rules.md#br-clm-001-conflict-claim-access-restriction) delegates to `ClaimServices.HasOverrideAcess`, a type not defined anywhere in this library or the rest of the scanned repository; its owning package/library could not be resolved from dependency metadata, so its behavior and version cannot be verified**.
- Several referenced NuGet packages (`SAIF.BOF.Business.View.Claim`/`View.Provider`, `SAIF.Framework.Common`, `SAIF.HashUtil`, `SAIF.ResourceFiles`, `SAIF.Legacy.BankValidator`, `PdfAPI.Client`/`Core`, `SAIF.Web.API.Clients`/`Core`, and most third-party packages) are referenced at the project level but have no observed direct type usage in this library's own source, so their actual runtime necessity to this library specifically could not be confirmed*.
- `Oracle.ManagedDataAccess` connectivity is configured identically in both `Web.config` and `app.config`; a version/config drift between the two files was not observed but was not independently diffed byte-for-byte.

> **Note:** Statements marked with * were inferred from code structure, naming conventions, or
> contextual evidence where direct confirmation was not available in source artifacts. Statements
> marked with ** could not be confirmed; treat as unknown until verified.

## Related documentation
- [Index](index.md)
- [Overview](overview.md)
- [Architecture](architecture.md)
- [Operations and processes](operations-processes.md)
- [Business rules](business-rules.md)
- [Security and authorization](security-authorization.md)
- [Configuration](configuration.md)
- [API reference](api/index.md)

## Sources
- `SAIF.Application.Claim\SAIF.Application.Claim.vbproj`
- `SAIF.Application.Claim\packages.config`
- `SAIF.Application.Claim\Web.config`
- `SAIF.Application.Claim\app.config`